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PREFACE 


Tha  work  on  Chla  report  has  progressed  hand-in-hand 
with  the  design  effort  on  the  Console  System. 

This  caused  an  inevitable  delay  in  completing  the 
report,  but  on  the  other  hand,  it  proved  beneficial  in 
introducing  corrective  actions,  resulting  from  this 
Analysis,  in  parallel  with  the  Design. 

The  author  wishes  to  acknowledge  significant  contribu¬ 
tions  provided  by  his  KETRON.'lNC.  collegues:  Messrs. 

6.  S.  Farber  and  W.  S.  Mann;  the  PGI  Supervisor,  Mr.  Nathan 
Melman;  and  particularly,  Mr.  John  Glenn,  NAEC  91133  Section. 
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I.  INTRODUCTION 


This  report  presents  Che  results  of  the  Hazards /Failure 
Modes  and  Effects  Analysis  (H/FMEA)  for  the  NAVAIRENGCEN  designed 
MR  1  MOD  0  LSO  Heads-Up  Display  (HUD)  Console  System. 


II.  PURPOSE  OF  THE  ANALYSIS 


A.  The  analysis  of  the  MR  1  MOD  0  LSO  HUD  Console  System  was 
performed  primarily  to  disclose  potentially  critical  and  catastrophic 
safety-related  functional  failure  modes  of  components  and  sub- 
assemblies  comprising  Che  System. 

B.  Efforts  were  directed  toward  identifying  single-point  failure 
inodes  that  could  result  in: 

1.  personnel  hazards  leading  to  injury  or  death;  and 

2.  loss  of  equipment  and  mission  capability. 

C.  A  major  objective  of  the  analysis  was  to  provide  design 
improvement  recommendations  to  preclude  or  circumvent  identified 
failure  possibilities,  so  that  the  resulting  hazard  risks  would  either 
be  eliminated  or  greatly  reduced. 

D.  The  scope  and  methodology  of  the  H/FMEA  are  discussed  in 
detail  in  Section  VI  of  this  report. 


III.  SYSTEM  DESCRIPTION 


A.  The  LSO  HUD  Console  System  is  located  at  the  LSO's  (Landing  Signal 
Officer)  -Work  Station  on  the  aircraft  carrier. 

B.  The  mission  of  the  LSO  Work  Station  Facility  is  to  serve 

as  a  focal  point  for  recovery  information  display  and  communications 
required  for  flight  path  guidance  control  coordination  between  the  LSO 
and  pilot  of  the  landing  aircraft.  The  MR  1  MOD  0  LSO  HUD  Console  System 
has  been  developed  as  part  of  an  effort  to  increase  the  accessibility 
and  visibility  of  Information  displays  and  communications  facilities  in 
the  LSO  Work  Station  to  permit  more  rapid  perception  and  response  by 
the  LSO  to  flight  path  deviations  under  all  weather  conditions  to 
improve  the  safety  of  recovery  operations. 
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C.  The  LSO  HDD  Console  System  consists  of  a  display  subsystem  and 
a  hydraulic  lifting  unit  subsystem. 

1.  THE  DISPLAY  SUBSYSTEM  receives  data  signals  from  various  existing 
shipboard  systems  for  processing  and  display  in  the  LSO  HDD  console. 
Calibration,  testing,  and  troubleshooting  of  display  circuits  is 
facilitated  with  a  piece  of  portable  special  purpose  test  equipment. 

Those  systems  providing  inputs  to  the  HDD  console  include: 

a.  SPN-42  Radar  (automatic  carrier  landing  system) 

b.  SPN-44  Radar 

c.  ILARTS  (Integrated  Launch  and  Recovery  Television 

Surveillance)  or  PLAT  (Pilot  Landing  Aid  Television) 
system 

d.  FLOLS  (Fresnel  Lens  Optical  Landing  System) /Arresting 
gear  cross-check  system 

e.  Landing  area  status  system 

f.  Ship's  wind  measuring  system 

g.  Ship's  21MC  intercom  system 

h.  MO VLAS  (Manually  Operated  Visual  Landing  Aid  System) 

MK  1,  MOD  2 

i.  FLOLS  MK  6  MOD  3  or  MK  6  MOD  2  with  Trim/Harmonization 
computer 

j .  FLOLS  Wave-Off  subsystem 

2.  THE  HYDRAULIC  LIFTING  UNIT  SUBSYSTEM  provides  a  means  for  raising 
the  HDD  console  to  an  adjustable  height  to  accommodate  viewing  by  an  LSO 
standing  on  the  LSO  Platform.  It  also  provides  for  lowering  the  HDD 
console  to  an  unobstructing  level  below  the  flight  deck  into  a  storage 
enclosure.  Raising  and  lowering  control  is  accomplished  within  the  LSO 
work  station,  and  control  circuit  interlocks  guard  against  retracting  the 
console  when  it  is  misaligned  with  its  storage  enclosure  and  raising  the 
console  when  the  storage  enclosure  lid  is  down. 

D.  MK1  MOD  0  LSO  HUD  Console  System  components  (Units  1  through  5) 
are  identified  in  the  table  of  contents  of  this  report  (page  3) and 
individually  described  in  the  work  sheets  in  Appendix  A. 
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E.  The  LSO  HUD  console  will  be  complemented  in  an  Improved  LSO 
Work  Station  with  side  mounted  LSO  and  assistant  LSO  communications 
attachments,  an  LSO  "Base  console",  and  provisions  to  hydraulically 
operate  the  LSO  platform  windscreen  from  a  central  control  using  the 
LSO  HUD  Console  System  Hydraulic  power  package.  The  communications 
attachments  to  the  HUD  console  and  the  base  console  are  the  result  of  a 
repackaging  of  existing  communications  and  display  facilities  in  the 
LSO  Work  Station  to  eliminate  redundant  displays  and  provide  for  more 
accessible  communications  facilities  with  more  efficient  utilization 
of  space. 


IV.  RESULTS  AND  RECOMMENDATIONS 


A.  RESULTS 


The  tabulated  determinations  of  the  H/FMEA  of  the  HUD  Console 
System  are  presented  in  Appendix  A  of  this  report. 

The  evaluation  of  the  subsystems  is  included  in  Section  V  of 
this  report. 

Basically,  the  System  was  found  well  designed,  with  appropriately 
used  redundancies  and  fail  safe  principles. 

The  few  possible  hazards  found  were  immediately  brought  to  the 
attention  of  the  Program  Management  (NAEC) ,  which  provided  the  needed 
corrective  actions. 

B.  RECOMMENDATIONS 


Design  improvement  recommendations,  resulting  from  the  analysis, 
are  presented  in  Appendix  B  of  this  report. 

Each  recommendation  is  numbered  related  to  the  H/7MEA  table 
and  item. 

In  the  matrix,  there  are  indications  whether  the  recommended 
improvement  is  for: 

a  —  General  Reliability,  Simplification,  Design  Improvement 
b  —  Avoiding,  Eliminating  &  Reducing  Potential  Hazards 
c  —  Controlling  &  Minimizing  Potential  Hazards 
d  —  Incorporation  of  Fail-Safe  Principles 

There  is  also  an  indication,  whether  the  respective  recommended 
design  improvement  should  be  used  for: 

e  —  Existing  Design 
f  —  Future  Design 
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V.  SUBSYSTEM  CONSIDERATIONS 


Analysis  of  this  System's  components  and  functions  suggests  that 
even  though  the  possibility  of  failure  modes  of  critical  or  catastrophic 
nature  (category  II  or  I)  does  exist,  the  corresponding  probabilities 
are  reasonably  low. 

By  identifying  these  particular  hazards,  the  corresponding 
corrective  actions  will  eliminate  them  from  operating  times,  or  will 
reduce  the  probabilities  of  their  occurrences  to  much  lower  figures, 
reducing  the  risks  to  acceptable  levels. 

The  review  of  the  categories  I  and  II  in  each  subsystem  follows: 

UNIT  1:  Category  I:  None  found. 

Category  II:  a)  See  Nos.  1  and  2  in  Appendix  B. 

b)  The  loss  of  Console  and  HUD  control  due 
to  discontinuity  in  the  Cable's 
connector  is  expected  to  be  corrected 
in  a  routine  check-out  of  the  System. 

(See  Item  No.  18.0  of  the  Unit  1 
work  sheets.) 

UNIT  2:  Category  I:  None  found. 

Category  II:  See  Nos.  6,  7,  8  and  9  of  Appendix  B  for 

the  recommended  corrective  actions. 

UNIT  3:  Category  I:  None  found. 

Category  II:  See  Nos.  11,  18,  19,  26,  28,  30,  31  and 

32  for  the  recommended  corrective  actions. 
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Category  I-II:  An  Interesting  problem  was  found  in 

specification,  testing  and  requirements 
for  operation  of  the  Relays  518915-1, 
that  provided  a  high  probability, 
in  fact  a  certainty,  that  the  Relays 
would  not  allow  low  current  signals 
(below  40  m  amp)  to  pass  through. 

The  Program  Management  was  apprised 
of  the  problem  as  soon  as  it  was 
discovered,  and  Immediately  provided 
a  corrective  action:  to  form  two 
groups  of  these  Relays  —  one  for  the 
high  current  uses  to  be  tested  with 
10  Amp  current  through  the  contacts, 
and  one  for  the  low  current  Signals, 
to  be  tested  with  appropriately  low 
currents. 

However,  even  with  a  good  marking 
applied  to  distinguish  these  two  kinds 
of  Relays,  there  will  exist  a  probabil¬ 
ity  of  a  human  error  and,  therefore,  the 
corrective  actions',  as  suggested  in 
Appendix  B,  Nos.  33  and  34,  would  seem 
more  appropriate. 

Category  I(-II):The  Wave-off  Signals  and  the  Deck 

Status  warning  were  found  with  redundant 
wiring  going  through  the  same  Cable 
(W-0  Signals) ,  or  there  is  no  redundancy 
for  the  Foul  Deck  warning. 

See  Nos.  36  and  38  of  Appendix  B  for 
recommendations . 

Category  I:  None  found. 

Category  II:  See  Nos.  39,  40,  41  and  43  of  Appendix  B 

for  identification  and  recommendations. 
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VI.  SCOPE  AND  METHODOLOGY  OF  ANALYSIS 


A.  SCOPE 


The  Hazards/Failure  Modes  and  Effects  Analysis  (H/FMEA)  was 
performed  on  the  MK  1  MOD  0  Heads-Up  Display  (HUD)  Console  System  in 
accordance  with  the  Work  Statement  of  the  Purchase  Order  2288  of  Power 
Generators,  Inc.,  dated  5  June  1978. 

The  "Unit"  Cables,  even  though  not  included  in  the  Work  Statement, 
was  included  by  the  Analyst  because  of  the  logical  need  for  the 
completeness  of  the  System. 

The  list  of  all  the  Subsystems  ("Units")  appears  in  the  Table 
of  Contents,  page  3,  under  Appendix  A. 

The  Analysis  was  performed  at  the  levels  of  assembly  consistent 
with  available  design  definition  and  criticality  of  the  various  System 
functions. 

The  lowest  level  to  which  the  Analysis  was  carried  out  was  the 
component;  i.e.,  Switches,  Relays,  Valves,  etc.  Failure  modes  associated 
with  these  elements  were  identified  and  related  to  their  effect  on  the 
performance  of  higher  assemblies  or  functions  up  to  and  including  the 
System. 
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8.  METHODOLOGY 

1.  DESCRIPTION  OF  THE  H/FMEA  FORMAT 


Documentation  structure  o£  the  H/FMEA  is  in  general 
accordance  with  accepted  industry  standards,  namely  the  Society  of 
Automotive  Engineers  publication.  Design  Analysis  Procedures  for  Failure 
Mode,  Effects  and  Criticality  Analysis  (SAE  ARP  926),  and  MIL- STD-1629 , 
Procedures  for  Performing  a  Failure  Mode  and  Effect  Analysis.  The  FMEA 
was  performed  utilizing  the  System's  related  drawings  and  schematics 
provided  by  PGI/NAEC. 

Reference  is  made  to  Figure  1  at  the  end  of  this  section 
illustrating  the  H/FMEA  form  utilized  for  compiling  the  analysis. 

The  form  heading  information  is  used  as  follows: 

a)  The  TABLE  denotes  the  major  system  and  subsystem 
("Unit")  indexes. 

b)  NAME  presents  the  major  system  and  subsystem  titles. 

c)  The  system  document  where  the  treated  components 
are  defined  is  entered  on  the  DWG.  NO. /REV.  line. 

d)  The  page  and  total  pages  of  a  given  subsystem  table 
is  at  the  upper  right  of  the  heading. 
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Column  1  numerically  codes  cne  component  analyzed  with 
respect  to  the  subsystem  indexes.  The  complete  component /table  item  index 
is,  for  instance:  Unit  1.7.0.  for  reference  use. 

Column  2  indicates  the  system,  subsystem  and  component 
titles  and  includes  brief  descriptions  of  the  functions  at  each  level  so 
the  reader  may  gain  insight  into  the  significance  of  the  component 
analyzed.  Sketches,  Schematics  and  other  useful  information  have  been 
entered  when  of  importance  or  interest. 

Column  3  lists  the  hazardous-functional  failure  modes  of 
the  component  being  treated  and  examples  of  causes  where  necessary. 

Columns  4  through  9  are  utilized  to  describe  the  effects  of 
each  assumed  component  failure  mode  upon  the  personnel,  system  and  mission. 
These  effects  were  determined  based  on  a  detailed  analysis  of  the 
component  functional  relation  to  each  system  level. 

Column  10  entries  indicate  if  the  considered  failure  would 
be  detectable  by  the  operator. 

Column  11  classifies  failure  effects  on  a  scale  of  I  to  IV 
in  decreasing  severity  in  accordance  with  Military  Standard  882A,  System 
Safety  Program  Requirements.  A  detailed  explanation  of  the  classifications 
is  included  on  the  next  page.  The  numerical  system  of  failure  criticality 
codes  is  intended  to  quickly  highlight  for  the  reader  those  areas  of  the 
analysis  where  serious  problems  have  been  Identified. 

Column  12  is  reserved  for  the  Probability  of  Occurrence  of 
the  identified  Failure  Mode,  in  accordance  with  MIL-STD-882A. 

Column  13  presents  commentary  the  analyst  may  provide  in  the 
form  of  pertinent  information  which  will  clarify  the  results  of  the  partic¬ 
ular  failure  mode  considered.  These  remarks  include  statements  describing 
inherent  compensating  provisions  of  the  design,  and/or  recommended  design 
or  procedures  improvements. 

At  the  bottom  of  the  form  there  is  the  "NOTE",  which  explains 
in  detail  Column  11  ("Hazard  Level")  and  Column  12  ("Hazard  Probability") 
headings. 
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2.  FAILURE /HAZARD  CLASSIFICATION  CRITERIA 

Potential  failures  were  classified  relative  to  their  critical¬ 
ity  in  accordance  with  the  following  criteria  (per  KIL-STD-882A, 

paragraph  5. 4. 3.1:  Hazard  level): 

a)  Category  I  -  Catastrophic 

—  Will  cause  death  or  severe  Injury  to  personnel 
or  system  loss 

b)  Category  II  -  Critical 

—  Will  cause  personnel  injury  or  major  system 
damage,  or  will  require  immediate  corrective 
action  for  personnel  or  system  survival. 

c)  Category  III  -  Marginal 

—  Can  be  counteracted  or  controlled  without 
Injury  to  personnel  or  major  system  damage. 

r  .  . 

d)  Category  17  -  Negligible 

—  Will  not  result  in  personnel  injury  or 
system  damage. 

The  probabilities  of  the  potential  failures-hazards  were 
selected  according  to  the  following  criteria  (per  MIL-STD-882A,  paragraph 
5. 4. 3. 2): 

A  —  Frequent 
B  —  Reasonably  Probable 
C  —  Occasional 
D  —  Remote 

E  —  Extremely  Improbable 
F  —  Impossible. 

NOTE:  In  classifying  the  Failure /Hazards,  the  worst  case 
effects  on  operating  personnel  or  equipment  were  considered. 
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Hazard  Vav.A,  Ooluwi  11,  per  MIL-STD-882A,  para.  S.4.3.1  (I-Catastrophic;  Il-Crlticul;  Ill-Marginal;  IV-Negligible) 

Hazard  Probability,  Oolum  12,  per  MII/-STD-882A,  para.  5. 4. 3. 2  (A-Fruquent;  B-Reasonably  Probable;  C-Qccasional;  rv- Remote;  E-Extronely  Improbable; 

F-In»Msi!)le) 
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Hazard  Lev..!,  Column  11,  |«c  MIL-STD-882A,  para.  5.4. 3.1  (I -Catastrophic!  It-Criticul;  Ill-Maruinal;  IV-Netjltyible) 

Hazard  Probability,  Cohort  12,  per  MIL-9TD-882A,  |>ara.  5.4.3./  ‘A-Froqueni;  P-"  .  sorutbly  Probablei  C-Occaaianal:  D-Runotei  E-Extronely  Ii 
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Hazard  Icv.  l,  Oolimn  11,  per  KTL-9TO-B82A,  para.  5. 4. 3.1  (I-Catastro(4iici  Il-Crlticd;  Ill-Marginal;  IV-Ne<|l lgible) 

Hazard  Probability,  Col  inn  12,  per  MH/-STD-882A,  para.  5. 4. 3. 2  (A-Froguont;  B-Rnasonably  Probable;  C -Occasional ;  D- Remote;  E-Extremely  Improbable; 
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Hazard  Lev<_l,  Colimi  11,  per  HHr91D-M21,  para.  5. 4.  J.l  (I-Catastrophlc)  II-Criticuli  I II -Marginal)  TV-Negligible) 

Hazard  Probability,  Oolum  12,  per  MII/-STD-882A,  para.  5. 4. 3. 2  (A-Fregncriti  B-Roaaonably  Probable)  C-Orcaslonal ;  0- Remote)  E-Bxtremciy 

F-Impiwslble) 


Hazard  levul,  Oaluai  11,  pur  HIL-3TD-882A,  para.  S.4.3.1  (I-Catastroplilcj  11-CrJtic.JU  I II -Marginal;  TV-Negligible) 

Hazard  Probability,  Coluan  12,  per  MIL- tilt)- 882A,  para.  5.4. 3. 2  iA-Froqnenl.;  .'’-Kci^dvibly  Probable;  C-Occaaional;  IHlenotei 

F-IiHinssible) 


Hazard  Lev^l,  ODlum  11,  per  MIL/-f7TT>-8B2A(  para.  5.4. 3.1  (I-Catastmpbic;  II-Critical;  Ill-Marginal;  IV-Negllgible) 

Hazard  Probability,  Col  inn  12,  per  MH/-S1D-882A,  para.  5. 4. 3. 2  (A-Frequtnt;  B-lteaaonably  Probable;  C-Occasional;  P-Baiotoi  E-Extrenely 

P-I«T»>ssIble) 
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Hazard  Level,  Oolimn  11,  per  MIL-STO-8B2A,  para.  5. 4. 3.1  (I-Catastrophlc)  ll-Critlcal;  Ill-Marginal)  IV-Megllglble) 

ILizard  Probability,  Oolum  12,  per  MIL-STD-882A,  para.  5. 4. 3. 2  (A-Frequent)  B -Reasonably  Probable)  C-Occasional)  D- Remote)  E-Extremely  Inprobable; 

F-IixtosII’W 


Hazard  Level,  Oolum  11,  per  MU/-S1D-882A,  para.  5. 4. 3.1  (I-Cataatrophlc;  Il-Crlticalf  ITT-Marginal;  J\M*>gllglble( 

Hazard  Probability,  Column  12,  per  HII/-b'TT>-882A,  para.  5.4. 3. 2  (A-Frorpiont;  D-Reasonably  Probable;  C-ttxrasional ;  b-Remte;  E-Extremely  Improbable; 

F-lmrisrjiblc) 
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Hazard  Lsvul,  Oolum  11,  per  HIp-9(D-862A,  para.  5. 4. 3.1  (I -Catastrophic;  Il-Criticul;  Ill-Marginali  TV-Negligiblel 

Hazard  Probability,  Cbluwi  12,  per  HIJ,-i>TD-B82A,  para.  5. 4. 3. 2  'A-Frequent;  B-Reasonably  Probable;  C-Oecasional ;  D-RcnDte;  E-Extranely  Inprobable; 

K-Ingjossible) 


Hazard  Lcvul,  Cblum  11,  per  MIL-STD-882A,  para.  5. 4. 3.1  (I-Catastrophici  II-Crltical)  Ill-Marginal}  JV-Ne«iligil>le) 

Hazard  Probability,  Cblum  12,  per  MU<-STD-8B2A,  para.  5. 4. 3. 2  ift-Frequent}  B-Iteaaonably  Probable}  C-Oocaslonal)  D-Honote)  E-Gxtrcnely  Inprnbable) 

F-Tiniossihlel 


Hazard  larval,  Ooluan  11,  per  MII/-8TO-882A,  para.  5.4. 3.1  (I-Catastro|4tici  II-Critlcul;  III-Marglnal;  rvMtojl lgible) 

Hazard  Probability,  Col  um  12,  per  MIL-9n>-B82A,  para.  5. 4. 3. 2  OVFrajuent;  B-Keaeonabiy  Probable;  C -Occasional j  tvftjroto;  E- Extremely  Iaprobable; 


Sub-  ay  steal)  SYNCHRO  JUNCTION  BOX 


Hazard  Level,  Ctoluwi  11,  per  MIL-8TD-882A,  para.  S.4.3.1  <l-Catastrophici  II-Ct  i tlc..l i  Ill-Marginal)  TV-Negligible) 

Hazard  Probability,  Colimn  12,  per  MII/-STO-B02A,  |>aia.  S.4.3.2  (A-Preguent ;  B-lieaaonably  Probable)  C -Occasional;  o-Rmnte;  E-Extramly  Iignubablu; 


( Sub- sy steal  SYMCHRO  JUHCTION  BOX 


Hazard  Lewi,  Oolum  11,  per  HIb-STt>-B82A,  para.  5.4.3. 1  (I-Catastrophlc;  Il-Crltlcul;  Ill-Marginal;  IV-Negl lgihle) 

Hazard  Probability,  Cbliam  12,  per  MIb-£Rl>-B82A,  para.  5. 4. 3. 2  (A-Frapentt  B-Heaeonably  Probable;  C -Occasional ;  tVRenote;  B-Extronely 

F-  *"*033  i  I'* 


Hazard  bevel,  Oolum  11,  per  MLL-SID-882A,  para.  5.4. 3.1  (I-Catastrophlo  II-Cri tlc.,l i  Ill-Marginal)  TV-Negligible) 

Hazard  Probability,  Cbltmn  12,  per  MIL-STO-882A,  para.  5. 4. 3. 2  (A-Frocjuent;  B -Reasonably  Probable;  C-Occaslonal)  tv  Remote)  E-Extranely  Improbable; 

F-lmmsslble) 
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Hazard  Inv^i,  OoUnn  11,  per  HII<-STO-882A,  para.  5. 4. 3.1  ( I-Cataatrophici  II-Criticuli  Ill-Marginal;  IV-Negligible) 

Hazard  Probability,  Co  him  12,  per  MH.-STO-8B2A,  para.  5. 4. 3. 2  <A-Frerjuenti  B-Rcasoriably  Probable;  C-Qccasiooal;  D-Remotei 

F-Iqjussible) 


*  '■**'■&* &0i  A  1  5>  U 


f-NU^ 

<  tn  i « 

Q  M  J 
Z  >  Z  O 

psg 

§“•5? 

CJ  o  u  CJ 

S5S> 

~sis 

<n  cn  ft* 

ZUZOl 

11! 

H 


a  aaaaatrso  « 
<  3D  XJXIXSWEtti'  " 


(TSOI  CSHWH)  Z 


•S  I  fil 
2  S  S  = 


4tt0XVH3<£0  „ 

AS  2 

Tiavioaiaa  - 


2  ssoi  - 
2  mmuoi  - 

01  -  ..—  - 

01  _ 
5  SSOT  « 


§  5  33WTO 

*•  s - 

fid  a)  SSOT 

flu 

flu  —  . 

U  M 

5  iomrMi 


M 

ca 

,  95  < 

cn  <  o  9  2 

is*as 

SESaS 

<  O  3  at  = 
M  Z  J  <  U 
Owejg 
S  flu  <  «C  X 

ft*  s 


£  —  w  ** 

<  —  « 

01  *3 

«§  «  a 
«  *-«  ■ 
U  Q.  iQ 
a  *•  CO  CO) 


»  * 

3  H 

2  2 

<  .  ~ 

u  ■§  > 

3  i  a 

3  -  > 


Hi  1 


229 (A-213) 


Pc*-*?  *  \.l 


RJUSC-91-7958 


® 

« 

a* 


S3 

a 

cni 


I 


COMMENTS |  RECOMMENDATIONS; 
COMPENSATING  PROVISIONS 
(ACCIDENT  PREVENTION  MEASURES) 
SAFETY  CONTROLS) 

Periodic  calibration  and 
Maintenance  will  keep  the 

Component  working  within 
ita  Intended  Halts. 

Extremely  improbable  to 
occur  (In  peacetime). 

Also,  the  pilot  baa  other 
channels/means  to  get 
information  on  accurate  True 

Air  Speed. 
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FUNCTIONAL 
FAILURE  MODE 
(HAZARD  RELEASE 
MECHANISM) 
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Hazard  Level,  OdIumi  11,  per  HIL-SID-882A,  para.  S.4.3.1  (I-Cataatrophic;  Il-Crlticol;  Ill-Marginal;  IV -Negligible) 

Hazard  Probability,  Cblurti  12,  per  MIL-STD-8B2A,  para.  S.4.3.2  (A-Frequcnt;  B-lteaaonably  Probable;  C-Cfccaslonal;  D-Aarote;  E -Extremely 

P.  - - l.lll.l-' 


Hazard  level,  Cblum  11,  per  MH/-STD-B82A,  para.  5.4. 3.1  (I-Catastrophtc)  Il-Critical)  I II -Marginal)  TV-Negligible) 

Hazard  Probability,  Coluan  12,  per  MIb-STO-B82A,  para.  5. 4. 3. 2  (A- Frequent)  B-Reaeonnbly  Probable)  C-Oocaslanal)  D-Ramtei  E-Extranely 

M»p059lWel 


Hazard  level,  Colinn  11,  per  MII/-STO-882A,  para.  5.4. 3.1  (I-Catastrophici  Il-Critic^l;  Ill-Marginal;  IV-Negligible) 

Hazard  Probability,  Calun  12,  per  MIL-STD-082A,  para.  5. 4. 3. 2  !A-Prequeit|  B-Reasonobly  Probable;  C-Occaaiai  tal ;  0- Remote;  E-Extroely  Inprobable; 

F-Tnyinssihlel 


Hazard  Uvul,  Oolum  11,  per  HII/-STD-B82A,  para.  5. 4. 3.1  (I-Catastrophic;  II-Crlticul;  Ill-Marginal;  rv-NejUgible) 

Hazard  Probability,  Coltnri  12,  per  MII/-CTD-882A,  para.  5. 4. 3. 2  (A-Frequent;  D-Reasonably  Probable;  C -Occasional;  D-Ramte;  E-Extrcmely  Improbable; 

F-Tn»rv;<rtl>|oi 


Hazard  level,  flolum  11,  per  MIL-Sn>-882A,  para.  5. 4. 3.1  (I-Cataatropbici  II-Crltic.il i  Ill-Marginal;  IV-Negligible) 

Hazard  Probability,  Colinn  12,  per  MII/-3TD-B82A,  para.  5. 4.3. 2  (A-Frequentf  B-Reaaonably  Probable;  C-Occasional;  O-ftaiotei  E-Iixtrtraaly  Improbable; 

F-  Inf>i:;uil)lo) 


NAEC-91-79 


<*•  WJ  m* 

£B2 
6  5  S  « 

SI82 

ZKnH 

u  u  u  u 

U  2  > 
a.  m  u  >- 

-  <  a.  u 
«n «  fa> 
h  Z  M 

£U  Z  w 

a  u 

152 

puu 

8  a 


«  o  c  c  — 

U  ♦  .«  ©  fa  fa  O 

s  I  ^  **  ■  -  fa 

fa  0  0  C  fa  X 

fa  fa  -*  —  *o  s  ■ 

«  4  *  2  -0  » 

<*-  p  «  S  fa  ^  u 

u  a  fa  w  p 
o  Cl  q  •*<  fi>^ 

»  0  C  *  — 

0  0X0  00 

X  fa  O  X  <M 


0  «  «  I  t  ^  J  • 
O  >0  X  0  fa  X  W 
©WfaUOBfaP 

Ja  0  i  o  0  o 

0  0  j*  w  U  fa  O 
L  A  O  O.DIO  o 


Ss  I 


0  fa  0  O 
fa  0  9  V 
•  900 

■5  fa  —  0 

fa  fa  fa  fa 

0  0  0  0 

8  •  *  «  ■5 
°2  Js  S 
JS  5  **  8  £ 


a  jt  S  * 

JS  5  -  S  £ 

Q  M  <w 

fa  U  0  fa  o 

•4  Q,  fa 

r  0  • 

X  fa  «  0  *4 
Dt  9  0 

fjr  s  s  ? 

5  II  I? 
0  0  0 
C  fa  •  0  fa 
O  4i  41  C  <H 
>0000 
fd  •  >6<h 


—  fa  X  0 

12  S* 

•  *  *  %  * 

2  si 0  a: 
?  s  i.'SJ. 
A? - 

0  O  —  0  fa  . 
X  O  X 
O  fa  0  O  * 
fi.  fa  e  . 
O  .0  0  0 
fa  0  0  O  fa  . 

i  i°5  i  ■ 

fa  0  0  fa  ' 

fa  e  x  0 

O  0  fa  •  fit  • 
fit  fa  fa  o 
C  fi.  0 
0  fa  0  *U  0 

X  0  0  fa  X 
P  I  X  0  fa 


C/-X  oo 
— 1 


<  |  JO  JATXIBTOOHd  |  ~ 


o  cn. 

=]  J 


g  iaoivaMO  _ 

<  xe  ° 

fc  mwiaaiaa  - 


*  ssoi  - 

2  TYIitOiOd  - 

05 
05 


S  £  39YHVa 
H  _ 

u  «  sscn 


M 
05 
flfl  < 

iSSSx 

gg*S2 

as  E  S  o  5 

£|3Jo 

*esss 

h*  X 


%«  e  i 
o  fa  —  fa 
9  *0  fa 

«  fa  e  0 
fa  9  9  _ 
fa  fa  O  04 
Q  .  fa  0 


Q  fa  0  9 
X  V  9»  fa 
0  P  _  0  X 
•  >  *0  0  o* 

<?  S  33 


1  a  S 

fal  0  fa  0 
ONJ  9  ^  fat 
9  e  «  fa  0  <m 

X  <fa  01*  0X0 
fa  »w  fa  fa  i 

O  “J  0 

e  i  c  £  •  •  > 

«<h  0  fa  y  fa  0  0  • 

>  -J  <  fa  p  *  c 

e  0  fa  .  .  0  o 

0KO0faO0fa 

is  “S  •Lit 

e  2  fa  e  fa  3  fa  i 

3  «•*  fa  o  >  o  fa 


0  fa  0 
£  >  H  ■ 

X  C  ^  fa  0  * 

fa  fa  c  ©  x  © 

c  s 

CO  u  o 

0  0  <  fa  0  fa 

fi,  0  -  fa  X  fa 

o  o  a  e  g  fa  o 

fa  ^  —  0  c 

C  fa  X  0  0  fa  9 

<  9  a  x  fa  o  fa 


fal  o  0 

»  e  > 

e  9cn 
0  o  fa  fa 

fa  0  0 

C  fa  x  fa  X 

fa  o  *i  0  fa 

0  fa 

e  c  fa  9  fa 

o  c  o  o  o 


s 

w  in 


2  i  > 

fa  9  U 


3  U 

Si  I 


J*  3 
ail  m 
8  “  .5 

C  fa  o 
fa  0  0 

fa  fa  fa  c 

fa  fa  e 
fa  fa  i  • 

45  23 

O  O  fa  01 


■s  *  s 

O  0  0 

ds 

9  fa 

Set  o 

"si 

-  I-  >  u 

21", 

ills 


M  U 

* !  = 

« I  8  s 


&  K  fa  3  **  C  r 

n:s;  is 

sslsl  si 


J 


NIUBC-91-7958 


v)  a 
z  cn  a 
o?m 

-  M  o  < 

(J  w  U  A 

<  ca  x  ca 
O  M  4 

i|ss 

s  X  m  6-< 

l-ss 

aggu 

ShUX 

a-  ca 
09  cn  Cu 
6-  Z  6-  < 
zuzta 

pH 


g  33M3»m300  <N 

<  JO  uruswond  — 

N 

< 


S3  44 
-l  0 

-*  »  fi 

*4  s  ©  -* 
4  £  9  A* 

2  J2- 

§  “is 


«  U  U 

C  ’  S  1 


5  |j8§ 


9  44  *0  <0  0 

«  *4  M  M 

o  2  3  j  a, 


•  s*<  j  • 

«*  M  ^  g 

4  e  3 
c  4J  3  4 

9  e  •  *g  9 
«*  a  W  « 

:ls;3 

si  s-3 

*4  w  e  4 

4  •  <u 

I  J  S*  0 

P  44  4  44  44 


*0  -4 

s  -• 

4 

?  52  S 

llj: 

4  •  •  9 
4  U4  e 
3  S4- 
-4  4  3  e 
u  c  0 

i«  •  <4 

44  U  44 

e  3  o 

lisi 


s  4U04W340  „ 

£  xa  2 

aisvioaiaa  - 


5  SSffI  £ 
S  TVIiNXIOd  ~ 

CQ  ■■■■ 

01 

•2  ssai 


§  5  3SYHYQ 

t*  _____ 

§  5  ssffi 

Du 
Cm 
tt 


01 

.  M  < 

1  j  a  u  a 

01  <  o  3  x 

35*22 

as  5  2  a  ? 

siass 

OWMM 

St><<X 

o*  s 


9  O 

5  |  • 

2  9  f- 

5  3  3  5. 

e  j*  0  *  § 

0  84  -  jj 
S  *  8.  o  2 


w  m  •  a 
s  0  -«  «  >> 
&•  *2" 
0  2  3  .  i 
S  32  5  2 


□  3 

3 


■Hi 

ill! 


e 

1  4  1  *4 

44  U  4  • 

0  O  0  £  4 

2  5  3  o  0*  9 

5  §  a  «  4  "3 


M  f4  s  *4 

fi  044fl  4i 
<9  3  £  -4 

0*  «  MO 
0  9  9  0  0.44 

_  M  £  M  •  9 


1±  ?s 

*■*  a.  •** 

*  «  3  J 

|132 

4  -4  ^  5  J 

W  4  9  • 

m  g  n  -4  cm 

33  £  w$ 

»o  >  ^5  44 

C«  *  •  o  c 
B  5  -*  3 
«  a* 

9m  (fl  Q  9 


O  O  M  • 
9  9  SI  0  4 

-c  c  3  g  2 

44  c  9  c 

0  0  9  0* 
CO  JZ  -4 
•«*  4  41  4 

M  -4 

S  04<H  91 

2  _  J  0  c 


•  9 

S4J  M 

4  98 
4  «  u  n 


Jw  • 

•  44  44 

*31 

U  3 


«  4  M  f 

4fi  o  3 

44  •  M  M 

M  M  <M 

a  *  u 

<a  <  9 

4  .  .  H  • 

M  (4  44  «  *4 

82*1  . 

r.  T  «  "  3 

S  O  9  4> 

3&  8  I- 

9  9  -4 
•  ^  2  *  £ 

^  u  m  e  9 

CJ  H  0  «  44 


* 

S  3 


S-*  o  * 

J  o.  U> 


S5  9  0 

X  -4  ^ 


* 

•  44  a 

4  4  W  4 

If  m 


241(4-225) 


MOVE;  Hazard  Level,  CDluoi  11,  per  MH/-9TD-082A,  para.  5. 4. 3.1  (I-Catustrofiilci  II-CriLlcal;  ITI-Marqinal)  JV-Neqligible) 

Hazard  Protaabillty,  Column  12,  per  MIL-9TD-882A,  para.  5. 4. 3. 2  (A-Fra-faent;  ll-neasoikibly  Probable;  C-Occasional ;  b-Uemote;  E-Extreniely  Inprobable; 

F-Tn*  "'''Wiil'li') 


KAEC-91-7958 


Cft  Bm 

Sen  D 

M  O  < 

H  *-•  U  — 
<  w  X  cn 
Q  «  J 

P§§ 

X  06  m  H 
Z&hZ 
O  Z  O 
UU  uu 

Sz  > 

M  U  >* 

H  Kh 
~  <  c.  u 
cn  cn  b 
HZh< 

zuzu 
u  c-  u 


:  c  o  r  u 

i  •S4'* 
?  8 

1  <  “  ^  0 
I  ^  u  u 

i  ©  s  a. 

<0 

■H  j3  S  Af 
t  C  ©  4J  3 
i  D  U  ©  0 


•  ^  '  *  X 

-2  2" 

E  rv  U  • 

©  •  tj 

m  **  •v  < 

>  c  _ 

«  Q.  «  ® 

c  ©  r  1 

Sx  Sg  ' 

«  0  o 

©  «  U 

£  C  Q.  *J 

**  o  a  *w 
«*  «  • 
a  4J  u 

O  -4  ©  O  , 
C  -D  >  ki  • 
•«  *0  «  -* 

tn  a  a  < 


mo  • 

—  »  c 

•  m  m  o* 

**  «■<  >  *  c 

c  >  0  »  a 

3  0  ta  3  X 

-hftOP 
e  a  © 

>  *>  ©»  c 

U  4J  «  O' 

c  ■*  -• 

©  w  c  « 

-  *0  —  0  © 

SC  >  •© 

3  *3  *t3 

m  *o  c  a  £ 

§*•©_© 


i  —  v  w 

;  3  g  •  5 

i  a  fi.2  > 

in  «  0 

i  p  »m  —  u 

;  5.  o  >  a. 


d  ® 
g  s 


SDtonntnax  <n 

jo  iirnawaw  £ 


i  nasi  aavm)  3 

g  tnT.nnT.mjyn  - 

D  ■  ■  - 

d  £H0XVH3d0  _ 

<  X.Q  2 

fa  aisviaaiaa  - 


?  ssoa  - 

g  TYIiN310d  w 
cn  ■■  ■ 

cn  ^ 

J  SSOT  « 


§  £  35VHVa 

f-* 

H  cn  - 

u  5  ssen 

hi 

«  r - 

5  XHOTKX 


M 

cn 

„  M  < 

I  iJ  Q  U  a 

(A«OiJZ 

3ZZUU 


g*SE2 

ESoS 

|35c 


N  Z  tJ  < 

«C  D  H  N 
X  h*  <  < 
h*  X 


O  ©  *H 
•  «  0  C 
£  C  3  X 
3  c  ©  c  -a 
O  o  •  o  ej 

CO  £  •*  < 
H  41  W  J 
u  ^  o  > 
c  Of  <M  CO 

&. *  °Sf 

0  2  S  S  m  § 
S15SJ5 


41  ki 

o  « 

©*0  1 

c  c  « 

1  C  ©  4J  • 

own© 

:  0  >i  > 


C  O  *h  O  © 

©  >  5  w 

a  o  x  « 
0  ©  n  a, 

^  u  c  •  o 

5  «h  o  x  5 

<  >  «H  4J  m4 


C  >  O  * 

M  ki  ^  ^ 

O  *  3 

c  e  m  o 


0  0  3  © 

C  Am  O  «  X 

*  I  *  O  *J 


M  ■  » 

§  JB  > 

s  5  s 

s  **  > 


3  M 

s  1  1 

►  x  s 


242 (A-226) 


Hazard  Level,  Odium  11,  per  M1L-STO-BQ2A,  para.  5. 4. 3.1  <I-CatastropillC)  Il-Critlcal;  lit -Marginal)  TV-Negligible) 

Hazard  Probability,  Colum  12,  pur  MIL-STD-802A,  para.  5.4. 3. 2  (A-Fn*|uent.;  B-Ruasonably  Probable)  C-Otxaaional)  b- Remote;  E-Extranoly  Improbable; 

F-lmn'isildi-) 


HAEC-91-795 


u 

~  u 
w  cc 
Z  W  D 

gsa 

<  K  S  05 
Q  Hi  tJ 

z  >  z  o 

UOOB 

Z  S  m  H 
Z  CU  H  2 
O  Z  O 

uuuu 

SSS* 

hBH 
-<  ft.  U 
W  OT  U. 
H  Z  H  < 

zuzu 

U  &  b3 

Pf 


ii 

t  y  / 


U,»  ;J4 

$©|  5?^ 


9T*M>mpp^ 


5  jd  ALnrwacwd  3 


~  *  hUsi 

^  ip$s  i$pr» ' 

*  rr—i^ 


a  iHOXYU3dO 
£  *8 
snwioaiaa 


t!  '  SfaH 


iffi 

LJr  |gM 

I-ZSS.  A  ! 

5*^39=  TST  K  ! 


|  *1* 


£  SSOI  5 
m  TYIXKaXOd  - 

V)  — 

(A 

j  sscn 


v-*  ‘<3 


i  u  aovwva 
H  5  1 
&  &  sscn 

h. 

hi 


M  • 

•0 

o 

s. 

■JOE® 

© 

©  *0 

A  © 

©  M  ©  X 

o 

X  © 

M  x 

M  M 

s 

0  M 

U((H« 

a  x  c  q 

3 

M  o 

<-S.£  O 

TS  V  M  W  &  -H  W 

C  3  X  O  U  X  M  *m 

a  a  a  <  «*a 

c  x  6  — *  e 

CH  8  ONIC  U  OH 

o  _  ja*  a  om 

«H  x  «  i  m  o*a 

M  O  M  M  Z  MM  ©»  o 
BO8B0.CC0 
M  H  ®  w  O  B 

jq  e  o  m  o  e  c 

HOB  C  M  *  O 


M 

tn 

„  M  < 
i  x  a  u  — . 

(O  <  0*3  Z 
9ZZUI0 


8gxS2 

B  H  S  O  < 

<  O  =5  c  = 
M  Z  X  <  U 
OhNH 
X  h#  <  <  Z 

h.  x 


MV  > 

**  m 

►  i  > 

51  a  £ 

*  CO  S 

9  ~  V. 


3  M  • 

f  1  i 


OS  M  S  «u  3 

h*qosoo«wc«m 
X  >^E<C<C  0*0 

a  o  8H4ih  o  o  o 

M  M  M  DH  G  X 

m  x  a  »  x 

au • ■  00 

CMM  C  •  — MW 
HT3  X  O  «  0  0 

O  X  MM  B  i 

O  3  >0  O' 

o  »g  m  co  a  o  -h  e 
M  C  O  M 

O  •  O  S  CL  C* 
e<BQ.OBDO 
HH  o  O  o  H  H  B 
O  O  M  o  *o  0  X 

•  c  coo  a  o 


>  MOM 

m  O  O  M  X  O 

^m  m  c  o»  > 

m  O  OM  c  O  0 

M  O  O  M  x  0 

boh  a*o  m 
©  c*o  s  o  • 

M©CX0CMO 

-h  o'-h  o  a  o  m 

s  o  •  4J  o 

cro  O x  o  a  ■  c 

©MM  UhhOOl 
X  h  0  4JH 

•  x  o  m  a 

>iO  o  •  o  ©  x 

H-H4J  M  E  O  O 


O  -HO 
e  EH 
X  X  <0 

M  o  0^4 
«  x  a  a 
*>  E 
O  «-H 
X  E  -H  o 
4i  o  X 
MHO 

C  «M  x 


OC'PO’OSt _ 

i  ai-H  c *h  co  x  s 
OtX  ohh  on  h  a 
*  s*h  a  >  c  c 

IBO  O  O  4J  0  O-H 


MOO  O  OH  O 
>  X  M  4J  -H  > 

m  ons  o  s 
•  oh  m  u.uH 


>1  O  ^  4J 
O  C  O-H 
H0»c> 

O-H  0* 

X  O-H  C 

o  o 

OH  O 
X  3  M 

4J  as  o 
c  a  a. 


•  c  o  o  o  a  o 

O*  ot  S*  X  *H  x  o 
-H^CQOSMO-M 

a  « «h  ao  o  ox-h 
•o  x  C  O  OH  E 
o  o  c  o  0  c  X 

OOQOUOO  5 

ooac-u*a- 
— *-h  o  -h  o  a  a  x 

OO  BH  >,0  B  O 

x  o  x  o  3x ox  o  x 

OXXM  O  M  O  X 

HHOOI  a  ox 
OCOCXXOO440 

<H  H  0»4i  BHXHH 


•  oh  ®  a  o  x 
*o  5  o  x  o  ms 
v  oh  oh  oh  a 
e  a-H  e  x  o  c 

•H  o»x  OH  «H 
O  Oh  0  M  0 
*»  O«0  bh  £  91 

c  o  o  •  4*  o 
o  o  o  o*o  m 

0  C  M  <H  o  0  o 
i  -h*e  o  ohh  e 
«H  O  C  (M  o  O 

HH«  X  O  0 
O  C  H  OH  0>x 


O0OSO  00  0M0 

OHfl,OB>HiH  X*hH 
O  O  h»  c  <H  H  0) 


O  -HO 

O  O'  c 
s  e  m  o 

O-H  o 
0  M  H  >, 

M  OX 

MOM 

OH  3  c 

O  CM-H 
H  B  B  H 

S  M  O 
EH  o  M 
M  X  O 

o  -3  a 
o  o 

OHO 


SOOM  •X'O+'^O 
B  X  O  *»  *>  OM 
h  h  3  o  o  m  e  a 
o  o  V  o  MM  >,  B 

X  0  9H  M  O  Mm 
OHH  Q,  o  MOO 
x  OHp  *»  0  +* 

H  I  h  3H  f  B  00 
0X0  000MX 

MM  *0  X  +»  0  M 

>  m  o  o  m  o  *5 
ooxoHOMce 
T!  UH  9  BH  ao  0 


HHB9BH0B 

^HO-OOjpg. 

a  •w.is 

O  OH  X  H  H 
M  H  3  H  8  O  Bl 

s  oaoM  o«m  c 
B  MM  >M  o  0  M 
M  O  S  o  O  M 
O  ao  M  >  M  M  o 
0  O  0  C  M 


X  O  0  «  B 

M  C  M  C  M 

m  o  s  o  ~ 


M  o  s  o  o 
)  o5h 


_  W  V  W  h  H 

X  0*2*0  O  Hi  2. 

HMMXMOMO 
MM  MO 


s  o  m  ao  o 
246 (A-230) 


H  9  9  0  &  SM 
S  0*CH  B  M»M 
o  o  0  O  M«0  9 
«  X  X  *0  *0  0 


^  0  O  M 

CM  o  o 
o  o  x  m 
m  x-  m  a 
o  a  A 
O  B  M  M  o 
m  x  o  cn 
o  e  o  J 

M-f. 

H  o  M  X 
OIHH 
CUB 
s  o  O  H 
^  CH  B 


o<o 

O  0  0*0 

H  CM  o  O 

o  o  o  o  ox 

M  0  M  M  O  M 

a  m  o  ©  m 

O  x  «H  M  O  E 

M  M  O  O  0 

*C  M  M  X  o  M 

o  3  o  X  «M 

®  a  c 

5C0  <N  M  B  C 

m  a  smx  o 

o  a  OM 

MO*  C  M  M 

a  x  m  o  0»x  a 

OX  flSXM  >  M 

m  o  '  m  a  o 

c  a  a 

0  >itt  H  p  HO 

M  ©  c  B  0  C 

M  9  C  M  M 

*U  M  M  T-I  o  O  O 

OB  *0  X  X  E 

«  0  0  o  0  M 

SH)  JMXO 
M  o  O  O'  C 

O  o  «*J  X  3 

MX  N  0  u 

H  S  *0  *0  M  0 

o  e  c  c  x  <h 

X  V©  o  O  M 

X  •  c 

o  m  *  o  m  x  o 

c  s  >  m  w  o  a 

H  am  «H  x  o  • 
O  M  M  •  c 

s  m  m  <m  e  *o  o 
MO  0  M  0  CM 
O  O'  M  IQ  M 

©  0  CM  «M  o 
m  xm  om  o  a  e 

X  >M  (Q  CM  M 

N  U  0*0  s  s  o 
=  cx.  o «m a<M 
OH  0  X  ^  C  C 
O  O  M  o  H  Omm 
M  %0  X 

>  o  C  «n  X  0  0 
m  •  9  -OMM 

m  a  o  c  cxx 

MM  —M  o  H  O  o 
X  M  M  O  C  C 
*0  O  090  M  H  H 
M  O  O  0  O  O 
O  o  *  MX 
•o  X  <N  O  0  M  M  M 
c  M  co  M  OS 

o  x  o  o  a 

M  H  *  M  ©MM  C 
O  X  M  M  ©  M 

m  >  w*o  o 
<  C’~>  O'  o  X  o 
o  M  0  M  M  * 

>  o  s  *o  m  a 
m  e  a  a  m  m 
x  m  c  o  a  o  x 

*0  MM  M  o  «M  o 


,  |WP>- 


I 


I 


Hazard  bevel,  Gulunn  11,  per  HH.-STD-882A,  para.  5.4. 3. 1  (I-CatJS trophic;  Il-Criticul;  Ill-Marginal;  TV-Negligible) 

Hazard  Probability,  Colum  12,  per  MI I.-ST&-882A,  para.  5. 4. 3.2  (A-Frcxfient;  B-Mcaaonably  Probable;  C-Occaaional;  n-Regoto;  E-Extrooely  Improbable; 

F-fmpnssilile) 


Hazard  Level,  Colum  11,  per  MH/-9TD-B82A,  para.  S.4.3.1  (I -Catastrophic  i  11-CrJtical;  1 1  marginal  i  IV-Negligible) 

Hazard  Pmhhllity,  Oolum  12,  per  MIL-OTD-882A,  para.  5. 4. 3. 2  Opprequenti  B-lteaeonably  Probable)  C-Occaslonal i  O-IWotei 

F-inrmsIMe) 


Hazard  Level,  Oolim  11,  per  HIL-STD-81I2A,  para.  5. 4.3.1  (I-Catastrophic;'  Il-Critlcal;  Ill-Marginal;  IV-Negligible) 

Hazard  Probability,  Colum  12,  per  MU/-9TD-B82A,  para.  5.4. 3. 2  (A- Frequent;  B-Roasonably  Probable;  C-Otxaaional ;  n-Ramte;  E-Extranely  Iiipnibable; 

F-Innossiblel 


1 


JttEC-91-7958 


^Fa.!.L,JR.^.J,*C9£5_5_EeEEC.TS_AnALYS1S_i_Sy.SIEM)_SaEEt.Y_A'<A,.VSI.S  _i*1S1_iV?1L-0„L5CzI.!'JD_C(M1SOI.E_SY.SJ.EM 


Hazard  Level,  (blum  11,  per  HIIr-5TD-B82A,  para.  5. 4. 3.1  (I-Catastrophic)  II-Crltical  ,•  I II -Marginal)  IV-Negligtble) 

Hazard  Probability,  Colum  12,  per  MIL-STD-882A,  para.  5. 4. 3. 2  (A-Frcquentj  B-Reaaonably  Probable)  C-Occasionali  D-nemotej  E-Extrenely  Improbable) 

F-lin«ifnlWpl 


Hazard  Level,  Ooluan  11,  per  MIb-9Il>-882A,  para.  5. 4. 3.1  (I-Cataatrophlci  IX-Critlcalj  Ill-Marginal i  IV-Negliglble) 

Hazard  Probability,  COlirnn  12,  per  MIL-STO-B82A,  para.  5.4. 3. 2  (A-Prequenti  B-Rojsonably  Probable i  C-Occaalonal j  D-Raote«  E-Extromly  Uprobable, 

P-Tin»visll*l.'l 


(Fa;.ujr£_*:ol*es  .^Effects  Analysis  -  System) Safety  Analysis  HK1  MO  0  ISO-H'JO  Comsoif  System 
*  flAEC- 91^7953 


Hazard  Lmul,  CDlum  11,  per  MU/- STD- 88 2A,  para.  5. 4. 3.1  (I -Catastrophic)  Il-Crltical)  Ill-Marginal)  TV-Negligible) 

Hazard  Probability,  CDltan  12,  per  MU/- SID- 88 2A,  para.  5. 4. 3. 2  (A-Froquent)  B-Reasortably  Probable)  C-Occaalonal)  D-Ranotei  E-Gxtrcnely 

F-Inp«ssll)le) 


Hazard  Levul,  Cohan  11,  per  MIk-3TT>-882A.  para.  5.4. 3.1  (I-Catastrophio  Il-Crlticuli  Ill-Marginal)  IV-Negligible) 

Hazard  Probability,  Cohan  12,  per  HUr-8TD-882A,  para.  5. 4. 3.2  'A-FracjutnCi  B-Reasonably  Probable)  C-Occaaional i  D-tenotei  B-Extraaely 

F-Tnpnssible) 


Hazard  Level,  Gotten  11,  per  MII/-SID-882A,  para.  5. 4. 1.1  (I-Catastrofblc;  Il-Crltic.,1;  Ill-Marginal;  IV-Negligible) 

Hazard  Probability,  Cblum  12,  per  MIL-Sn>-‘882A,  para.  5. 4. 3. 2  (A-Frorjuent;  B-Roaaonably  Probable;  C-Occaalonal;  t>- Remote;  E- 

F-tiwrtsrsiblc) 


Hazard  Level,  Co  Iran  11,  per  MII/-9TD-B82A,  para.  S.4.1.1  (l -Catastrophic;  Ill-Marginal ;  IV-Negligible) 

Hazard  Probability,  Col  nun  12,  per  MIL-STD-882A,  para.  5.4. 3.2  (A-Proqutnti  B-Heasonably  Probable;  C -Occasional;  l>-Ifcnotei  E-Bxtroaely  Iaprobable; 

P-llfffiiillla) 


NOTE;  Ikizard  Level,  OdIijri  11,  per  MH/-STD-B82A,  para.  5. 4.  3.1  (1-CatastrophiC)  Il-Crlticol;  I TI -Marginal;  TV-Negligible) 

Hazard  Probability,  Colunri  12,  per  HHr8IO-Bt21,  para,  5.4.3. 2  ..VFrcxjueait.)  B- Reasonably  Probable)  C-Occaaional i  O-Hanatoi 

F-liif»rs3il)1ey 


O  CO 
V>  LA 

H 

°i  3 

r:  a 


g  iaoivaado 

£  *s 

a-iavxaajaa 


*  ssoi  - 

S  TYIXtQUM  - 

ai  .  ' 

<n 

«  ssai 


§  5  3swwa 

u  co  SSOT 

S» 
n* 
u 


aa 
cn 
ca  < 

A283x 


SBSSI 

NZd<U 

o  M  M  U 

r  cu  <  <  x 
fiu  S 


44  V  Qt 

«  0  c 

U  *H  U 

*•<  ■  ..  • 


1  SMI  3-*s 

>  &  *■*  V  0 


s  .  a 

V  £  v  *4  -5 

o  o  r 

V»  U  >0  14 

o  <m  a  «  >  «  u  « 

k»^a»ai»*-4> 

■  teoooaso 
a  %  4  q,^  u  a  & 


3  * 

U  44  W 

i  •  m  m  o 
i  r-  a  o  *4 

I  01  4*  ^  * 

i  *Q?.S 

j=  «  *2 


J  44  9  <9  2 

I*  -a  at  > 
o  ^  f 

8  3  •g  P  2 
52  2  ^ 
*  44  <9  40  3* 

2§a  8« 

4  <  11  S 
j/a 
2  * 

I  2,  <  *3  *  S 


269 (A-253) 


Wfrr.*! 


Hazard  Levul,  Cblum  11,  per  MUr-STO- B82A,  para.  S.4.3.1  (I-Catastrophic;  IX-Crlticuli  Ill-Marginal;  IV-Ne<|liglble) 

Hazard  Probability,  Column  12,  per  MIL-9TD-B82A,  para.  5. 4. 3. 2  (A-Freguonti  B-Reesonably  Probable;  C-Occasional;  I  >- Remote;  E-Extzonely  Inprubable; 

l-Inposaible) 


-7958 


This  page  intentionally  left  blank 


270(A-254) 


NAEC-91-7958 


APPENDIX  B 

H/FMEA  RECOMMENDATIONS  SUMMARY 


NAEC-91-7958 


This  page  intentionally  left  blank 


272  (B-Oa) 


SUMMARY,  SYSTEM  SAFETY  ANALYSIS 
MX1  MOD  0  LSO-HUD  CONSOLE  SYSTEM 


NAEC-91-7958 


RECOMMENDATION 


It  is  recommended  that  the  CRT  and  Yoke 
be  enclosed  by  a  protective  cover  if  the 
only  removal  path  is  through  the  console 
front.  The  cover  should  be  secured  to  the 
CRT  envelope  and  provide  access  for  the 
removal  of  the  high  voltage  lead  and 
connections  to  the  CRT  and  yoke. 

Place  a  wide  wire  mesh  screen  over  the 
front  face  of  the  projection  lamp  to 
preclude  accident  during  maintenance. 

Create  a  sandwich  of  the  combiner  glass 
and  a  plastic  neutral  density  filter  on 
the  observer  side  of  the  combiner  glass. 

Incorporate  a  compression  pin  locking 
device  on  the  side  of  the  mirror  and 
support  assembly  base  to  lock  and  maintain 
the  support  arm  in  the  vertical  attitude 
regardless  of  knurled  knob  tension. 

Incorporate  a  compression  pin  locking 
device  on  the  spherical  mirror  hold-down 
latch. 

Provide  a  warning  circuit  within  the  LSO 
Console  (aural  &  visual)  to  warn  the  user 
that  an  excursion  has  occurred  which  may, 
or  may  not,  have  caused  damage  that 
requires  the  attention  of  maintenance 
personnel. 

i 

Provide  individual  indicators  on  the  LSO 
console  for  each  voltage  as  a  confidence 
indicator  ( "G0"/"N0-<30"  )  . 

Provide  overvoltage  protection  for  each 
power  supply  output  to  bar  against 
damaging  transients. 

Replace  the  dependency  of  the  main  power 
control  bus  on  the  airflow  switch  -  let 
loss  of  cooling  airflow  energize  a  warning 
indicator  which  coordinates  with  items 
6  and  7  above. 


RELATED  TO 


UNIT  I  ITEM  a 
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Arrange  with  the  vendor  (Galland  Henning 
Nopak,  Inc.  1025  S.  4th  St.,  Milwaukee, 
Wise.  53215)  to  provide  round  and  smooth 
corners  and  edges  to  avoid  personal 
injury,  on  their  dwg.  C-22026CY. 

Arrange  with  the  same  vendor  to  provide 
ample  raddi  to  form  round  fillets  between 
the  attaching  feet  and  the  body  of  this 
part : 

V  •  ■ 

(Vendor's  dwg.  D-417SK;  applies  to  Nos. 

10,  11,  12) 

Arrange  with  the  same  vendor  to  incor¬ 
porate  an  air  purging  or  other  means  to 
get  rid  of  the  upper  air  bubble,  to 
assure  the  gland  to  be  always  bathed  in 
the  hydraulic  liquid. 

Arrange  with  the  vendor  (G.H.  Nopak,  Inc.) 
to  specify  ample  raddi  in  all  fillets, 
especially  those  that  could  cause  stress 
concentration,  and  to  premachine  the 
Round  Stock  to  prepare  it  better  for  the 
welding  to  the  tubing.  See  sketch  below 
i  (Piston  Rod,  item  4  of  Cylinder  620728-4) 


f22r<5235S»t3>' 
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(cont) 


RTCOMMEHDRCTON 


i)  Introduce  the  necessary  pre-opera- 
tional  checks  of  the  System  to  be 
performed  before  the  intended  use. 

ii)  Provide  a  protection  arrangement 
to  keep  the  debris  from  falling 
between  the  Roller  and  the  Cam. 


Provide  the  two  existing  rubber  inner  padi :  3A1 
518987-2  to  "overhang”  -the  length  of  the 
Half  Clamps;  also,  provide  a  45°  chamfer 
or  round  the  inner  edges  of  the  Half 
Clamps . 

It  is  always  recommended  (particularly 
for  the  new  designs)  to  place  the  pump 
under  the  tank  so  that  the  Pump ' s  suction 
column  will  be  filled  with  a  positive 
pressure. 

The  need  for  priming  will  be  avoided  and 
the  efficiency  of  the  Pumps  will  increase. 

Provide  two  gussets  welded  inside  the  3A2 

Tank  against  the  outside  gussets  620579- 
11,  to  strengthen  the  support  of  the  Air 
Motor/Pump  Assembly. 

Re-evaluate  the  filtering  arrangement  and  3A2 
specify  the  correct  filter  element  for 
620582-6. 

For  the  Air  Motor  518913-1;  3A2 

a)  Mention  in  the  Operation  and  Mainte¬ 
nance  Manual  the  need  to  provide  load 
to  the  Air  Motor  or  otherwise  limit 
its  speed  to  10%  above  that  at 
maximum  power. 

b)  Provide  an  over speed  governor  or  shut¬ 
off  arrangement. 


RELATES  TO: 


UNIT  |  ITEM  fO.|  * 


Evaluate  the  test  results  in  cold,  humid 
weather  and  introduce  the  corrective 
action  as  necessary,  to  avoid  the  air 
exhaust  to  get  clogged  by  frozen,  con¬ 
densed  moisture. 


ZXGEtIO: 
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SSA 


UNIT 


RELATED  TO: 


HEM  M2»|  4 


FOR: 


25 


Provide  filtration  of  the  Hydraulic  Fluid 
to  25  micron  or  better,  as  required  (to 
avoid  contamination  of  the  Hydraulic 
Fluid  and  the  Relief  Valve  517792-1) . 


3A2 


1.2.6  .d 


One  possible  way  could  be  by  changing  the 
connection  as  shown  in  the  following 
HYDRAULIC  schematic: 


26 


Re:  Schematic  Diagram  620580:  Provide 
the  connections  in  such  a  way  that  there 
will  be  an  automatic  interlocking,  or  an 
automatic  return  of  Azimuth  and  Elevation 
to  their  aligned  positions  upon  activating 
the  HUD- Down  switch(es)  before  the  HUD 
would  start  moving  down,  or  keep  the 
LS2-B  contacts  always  open(i) 


3A2 


'1 . 2 . 7.  as 


x 


I 


NOTES:  There  should  be  no  connection 

between  pins  LS4-2  and  LS5-2! 

(2)  For  better  reliability  of  the 
observation  light  to  be  "on", 
eliminate  the  LSl-Bi  (Leave 
only  LS1-A  to  switch  the 
observation  light  "on".) 


LEGEND: 

a  -—  Central  Reliability,  Simplification,  Design  Improvement 
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For  the  Filter  518897-1: 

a)  Provide  also  electrical  Dirt  Alarm  , 

(available  in  this  line  of  filters) .  ] 

b)  Provide  enough  room  for  easy/quick 
replacement  of  the  Filter  Element. 

c)  Show  the  Dirt  Alarm  pointer  and  scale 
of  this  Filter  on  the  assembly 
drawings : 

620582-1  (Piping  Assy)  & 

620578-1  (Hydraulic  Power  Package) . 

Provide  a  tie  between  the  upper  end  (the 
Filter  516965-1)  and  the  Support  Frame 
620581-1  to  eliminate  or  greatly  reduce 
the  vibration  of  the  Filter. 

To  assure  an  increased  reliability  of  the 
Switch- Inidcator  A620741-4  (L8-S6)  "HUD- 
DOWN"  against  short  between  contacts  7-8 , 
provide  a  redundancy  by  connecting  the 
contacts : 


sJQSS  ? 


?  ISi  ? 
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To  increase  the  reliability  in  the  K2 
Relay  518915-1  against  the  NC  contacts  A 
failure  to  close,  wire  the  K2  Relay 
according  to  the  circuit  diagram: 


PSa**/- o.'l 
D3-«— j  j 


T£:  C&) 


>•<52) 


To  increase  the  reliability  in  the  K1 
Relay  518915-1  against  the  NO  conatcts  B 
failure  to  close,  wire  the  K1  Relay 
according  to  the  diagram  below: 


(W1 


4P2r€>* 


JO-  (jo) 


1XCZND: 
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UNIT  I  ITEM  JO. 


Wire  the  K2  Relay  as  shown  to  increase 
reliability  against  the  short  of  the  NO 
contacts  B: 


MOM'Ym)  TO:  CKZ) 


ai  -« — r>*“A2 


Relay  518915-1,  maximum  current  through 
contacts:  10  Amp,  minimum  current 
through  contacts:  40  milli-Amp  { i ) 

Considering  that  very  low  current  signals 
(38  micro/Amp!)  will  be  handled  in  the 
System,  the  following  is  recommended: 

Change  the  circuitry  to  assure  passage 

of  low  current  signals! !1 

(Current  amplification? ,  solid  state?) 

Relay  518915-1,  maximum  current  through 
contacts:  10  Amp,  minimum  current 
through  contacts:  40  milli-Amp  (!) 

Considering  that  very  low  current  signals 
(38  micro/Amp!)  will  be  handled  in  "the 
System,  the  following  is  recommended: 

Change  the  circuitry  to  assure  passage 
of  low  current  signals!!! 

(current  amplification?  solid  state?) 

Include  the  necessary  instruction  (to 
observe  the  Power  Monitor  Light  and 
switch  off  the  Power  Switch)  for 
Maintenance  personnel  before  they 
start  working  on  the  Unit  4A3. 


LEGEND: 


General  Reliability,  Simplification.  Design  Improvement 
Avoiding,  Eliminating  &  Reducing  Potential  Hazards 
Controlling  &  Minimizing  Potential  Hazards 
Incorporation  of  Fail-Safe  Principles 
Existing  Design 
Future  Design 

280  (B-8) 


1.2 
1.2.  j.; 

1.2.1.; 


X  X  X  X  X  X 


X  X  X  X 


X  X 


SUMMARY,  SYSTEM  SAFETY  ANALYSIS 

MK1  MOD  0  LSO-HUD  CONSOLS  SYSTSM  NAEC-91-7958 


SSA  | 

RELATED  TO:  t 

FOR: 

NO. 

RECOMMENDATION 

UNIT 

Bl 

EH 

m 

EH 

Bl 

a 

36 

Route  the  two  pair  of  Wave-off  Signals 
through  two  different  Cables. 

CABLES 

H 

X 

X 

1 

X 

1 

37 

Evaluate  a  possible  redundant  provision 
of  power  and  provide  such  design  change 
if  found  viable  and  advantageous . 

CABLES 

i.ii 

X 

X 

X 

X 

1 

38 

Provide  redundancy  in  the  warning 

CABLES 

1.16 

X 

X 

X 

X 

9 

arrangement  of  the  Deck  Status  (Cable 

W235  and  W231) . 

1.11 

1 

39 

Provide  overvoltage  protection  for  three 
power  supplies  in  the  test  simulator. 

5 

1.1a 

X 

. 

X 

. 

X 

40 

Install  power  supply  indicator  lamps  to 
show  power  supply  status.  (Suggest  usage 
with  No.  39)  Expediting  fault  isolation. 

5 

1.1a 

X 

X 

1 

X 

41 

Utilize  three  additional  positions  on 
meter  switch  S8  to  check  power  supply 
output  on  the  DVM. 

5 

1.1a 

X 

X 

X 

42 

Install  an  indicator  lamp  to  show  AC  to 
the  switching  relays. 

5 

1.1b 

i 

X 

X 

X 

43 

Consider  a  two-handled  simulator  enclosurt 

5 

1.3 

x  i 

X 

X 

as  the  present  one-handled  enclosure  is 
somewhat  bulky.  (11.5"  x  16"  x  10",  251bs 

> 

1 

44 

Recommend  the  DVM  be  externally  tested  as 
the  first  step  in  fault  isolation  (where 
the  DVM  is  utilized) 

5 

i 

O 

*a 

H 

oce 

iur 

i 

as 

45 

Recommend  the  drawing  package  be  inspec- 

5 

2.0 

j 

1 

ted  for  consistency. 

3.0 

X 

X 

X 

4.0 
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